What Timefindr asks for

When you approve an invitation, Google or Microsoft asks you to grant one permission: read-only access to your calendar. Nothing else. You approve it on Google's or Microsoft's own screen, not ours, and you can withdraw it there at any time.

What it actually reads

Timefindr asks your calendar provider a single question: which blocks of time are you busy? On Google it uses the free/busy endpoint, which by design returns start and end times and nothing else — no titles, no guests, no descriptions ever reach us. On Outlook it requests a deliberately narrow set of fields, and meeting subjects are not among them.

It also reads two settings, so that proposed times are sensible for you:

• Your calendar's timezone
• Your working hours, if your calendar has them set

What it never sees

• What your meetings are called
• Who else is invited to them
• Descriptions, agendas, attachments or locations
• Anything in your email, contacts, files or any other service

What it can never do

The permission is read-only, enforced by Google and Microsoft rather than by us. Timefindr cannot create, move, edit, cancel or delete anything on your calendar. It cannot invite you to anything. When the person who invited you picks a time, they send you a normal calendar invitation, which you accept or decline exactly as you would any other.

Who can see your availability

Only the person whose invitation you accepted. Grants are not shared or pooled: if two different people invite you, those are two separate grants, and neither can see the other. Your availability is never shown to their colleagues, and it is never published anywhere.

Stopping

There are three ways out, and all of them work immediately:

• The unsubscribe link at the bottom of every email we send you, which deletes your access grant outright
• Revoking Timefindr in your Google account permissions or Microsoft account permissions
• Asking the person who invited you to remove you

When a grant is deleted, the stored access tokens go with it. We keep no shadow copy of your calendar — there is nothing to keep, because we never stored your events in the first place.